843 matches found
CVE-2020-14151
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority for the following reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-11813. Reason: This candidate is a duplicate of CVE-2018-11813. Notes: All CVE users should reference ID instead of this candidate. All...
WooCommerce < 4.1.0 - Unescaped Metadata when Duplicating Products
The WooCommerce changelog file was updated with the following message: "Security – Fixed unescaped meta data while duplicating products. Reported by Slavco." We will update this issue with further information as it becomes available...
Invoker - Penetration Testing Utility
Penetration testing utility. The goal is to use this tool when access to some Windows OS features through GUI is restricted. Some features require administrative privileges. Capabilities: invoke the Command Prompt and PowerShell, download a file, schedule a task, add a registry key, connect to a...
CVE-2020-10707
CVE-2020-10707 is a reservation duplicate of CVE-2020-11612. The active entry is CVE-2020-11612, describing Netty’s ZlibDecoders vulnerability: unbounded memory allocation when decoding a ZlibEncoded stream, potentially exhausting memory resources. Remediation is to upgrade to a fixed Netty versi...
MS12-051: Vulnerability in Microsoft Office for Mac could allow elevation of privilege: July 10, 2012
Describes the Microsoft Office for Mac 2011 14.2.3 Update that was released on July 10, 2012INTRODUCTIONMicrosoft has released security bulletin MS12-051. This security bulletin contains all the relevant information about the security update for Microsoft Office for Mac 2011. To view the complete...
Mail.ru: [icq.com/people/*uin*/edit] Отсутствует фильтр и проверка на дубли в поле "Никнейм"
It was possible to create account with a same nickname wih existing one...
CVE-2015-1387
CVE-2015-1387 is a reservation duplicate of CVE-2015-1454. Connected records confirm a MitM certificate-validation flaw in Blue Coat ProxyClient and Unified Agent: ProxyClient <3.3.3.3 and 3.4.x <3.4.4.10; Unified Agent
CVE-2014-3893
CVE-2014-3893 is a duplicate of CVE-2014-0114. Connected docs provide concrete details for CVE-2014-0114 (Apache Struts 1.x): remote code execution via ClassLoader manipulation in the Struts ActionForm, with fixes/mitigations across affected products. Remedies noted include upgrading to patched A...
CVE-2013-3621
CVE-2013-3621 is a reserved/duplicate of CVE-2013-3607, but connected documents discuss Supermicro IPMI CGI vulnerabilities: unauthenticated buffer‑overflow flaws in the login.cgi/close_window.cgi components on Supermicro IPMI firmware CGI, enabling remote code execution on affected BMCs. Documen...
ChaCha20 counter overflow can expose repetitions in the keystream
The ChaCha20 stream cipher can produce a maximum of 2^32 blocks 256GB before the 32-bit counter overflows. Releases of the chacha20 crate prior to v0.2.3 allow generating keystreams larger than this, including seeking past the limit. When this occurs, the keystream is duplicated, with failure mod...
RUSTSEC-2019-0029 ChaCha20 counter overflow can expose repetitions in the keystream
The ChaCha20 stream cipher can produce a maximum of 2^32 blocks 256GB before the 32-bit counter overflows. Releases of the chacha20 crate prior to v0.2.3 allow generating keystreams larger than this, including seeking past the limit. When this occurs, the keystream is duplicated, with failure mod...
CVE-2008-6176
No description is available for this CVE...
CVE-2016-10840
cPanel before 11.54.0.4 allows arbitrary code execution during locale duplication SEC-72...
CVE-2016-10840
cPanel before 11.54.0.4 allows arbitrary code execution during locale duplication SEC-72...
Design/Logic Flaw
cPanel before 11.54.0.4 allows arbitrary code execution during locale duplication SEC-72...
CVE-2016-10840
cPanel before 11.54.0.4 allows arbitrary code execution during locale duplication SEC-72...
CVE-2016-10840
CVE-2016-10840 affects cPanel prior to 11.54.0.4. The issue allows arbitrary code execution during locale duplication (SEC-72). Affected product: cPanel (control panel software). The vulnerability is evidenced in multiple sources, including NVD and Red Hat’s CVE listing, indicating an in-product ...
CVE-2019-12615
An issue was discovered in getvdevportnodeinfo in arch/sparc/kernel/mdesc.c in the Linux kernel through 5.1.6. There is an unchecked kstrdupconst of nodeinfo-vdevport.name, which might allow an attacker to cause a denial of service NULL pointer dereference and system crash...
CVE-2019-5428
CVE-2019-5428 is rejected/not used and does not represent an active vulnerability entry; refer to CVE-2019-11358.
Microsoft Windows 10 1809 - LUAFV Delayed Virtualization Cross Process Handle Duplication Privilege Escalation
Microsoft Windows 10 1809 - LUAFV Delayed Virtualization Cross Process Handle Duplication Privilege Escalation Windows: LUAFV Delayed Virtualization Cross Process Handle Duplication EoP Platform: Windows 10 1809 not tested earlier Class: Elevation of Privilege Security Boundary per Windows Securi...